Sovereign Forger
Sovereign Forger
Answer 10 questions about your test data practices.
Get your risk score and potential fine exposure in under 3 minutes.
GDPR fines can reach up to 4% of annual global revenue or €20 million — whichever is higher.
Enter your company’s annual global revenue in euros to estimate your exposure.
How we estimate your fine exposure
This estimate uses 4% of annual global revenue as the fine ceiling, adjusted by your risk score as a severity proxy. Actual fines are determined by your national Data Protection Authority (DPA) based on 11 factors under Article 83(2) GDPR: severity, intent, mitigation measures, cooperation, data categories involved, prior violations, and more.
Why we use 4% of revenue and not the €20M floor
GDPR Article 83(5) sets the maximum fine at “up to 20,000,000 EUR, or in the case of an undertaking, up to 4% of the total worldwide annual turnover of the preceding financial year, whichever is higher.” For companies with revenue below €500M, the €20M floor would exceed 4% of revenue — producing estimates that are disproportionate to the organization’s size. Since DPAs are required to ensure fines are “effective, proportionate and dissuasive” (Art. 83(1)), we use 4% of revenue as a more realistic baseline for our estimate.
This tool does not constitute legal advice. Consult qualified legal counsel for jurisdiction-specific guidance.
This online assessment shows where you stand. The PDF report shows what changes — a side-by-side comparison of every answer with Born-Synthetic data, your projected savings, and three priority actions for your team.
Your PDF report will be ready instantly. We'll also follow up with personalized compliance insights over the next few days. If you don't see the email, check your spam folder.
Born-Synthetic data is generated from mathematical distributions — zero real persons, zero PII, zero GDPR exposure. Compliant by construction, not by anonymization.